- CeDeROM - THE FIRST CYBORG EVER -

Joined February 2010
THE HIDDEN COMPUTER IN YOUR WINDOWS MACHINE! And you don’t have the password! And AI just may have the real backdoor no one is talking about. — The Second Computer Intel Put in Your PC Never Needed Your Permission to Boot The second computer inside an Intel machine starts before the one you bought and continues after you shut it off. It lives in the Platform Controller Hub on the motherboard. From there it holds its own processor, a reserved slice of system memory, and a firmware image signed by Intel. When the board has power the engine can stay active even if the main system has been powered down. Active Management Technology and the later vPro brand began as a tool for corporate administrators who needed to reach a machine across a network, push a recovery image, or view a screen before the operating system loaded. By 2008 the same subsystem was present in consumer systems as well, where it handled early power sequencing and certain protected media paths. In July 2009 Alexander Tereshkin and Rafał Wojtczuk of Invisible Things Lab stood at Black Hat and showed that code running on that chipset processor could be reached and redirected. They called the resulting environment Ring −3. User programs sit at Ring 3. The operating-system kernel sits at Ring 0. A hypervisor can sit at Ring −1 and System Management Mode at Ring −2. The Management Engine sits outside those rings entirely, with direct memory access and a dedicated path to the network interface that does not depend on the host operating system. A rootkit placed there survives a full operating-system reinstall and is invisible to tools that look only at the main processor. After the Nehalem generation the firmware could no longer be simply erased. If the engine does not find a valid signed image the machine shuts itself down after thirty minutes. The timer was probably intended to support Intel’s anti-theft features; it also prevents ordinary removal. Nicola Corna’s me_cleaner tool, built on earlier reverse-engineering by Igor Skochinsky, strips most of the modules while leaving the early bring-up code that resets the watchdog. The resulting image must still be flashed with an external programmer. On many later platforms Boot Guard blocks even that route. In May 2017 researchers at Embedi found that the Active Management Technology login on versions 6 through 11.6 accepted a blank password hash. The comparison failed open. An attacker who could reach the management interface gained keyboard and mouse control, could change BIOS settings, and could run programs, all without a valid credential. The bug had been present since 2010. Intel issued a patch; the window between discovery and deployment varied by manufacturer. Later the same year Dmitry Sklyarov and colleagues at Positive Technologies examined Skylake-era firmware and found strings that belonged to MINIX 3. Andrew Tanenbaum had written MINIX as a teaching microkernel. He had spoken with Intel engineers years earlier about reducing its memory footprint and adding compile-time switches. After that conversation there was silence. Tanenbaum learned of the deployment from news reports in 2017 and wrote an open letter to then-CEO Brian Krzanich. He noted that the Berkeley license placed no obligation on Intel to tell him, and that he would have appreciated the courtesy. He also observed that a company of Intel’s size could have written its own code; the microkernel’s small size and modular structure had apparently been the practical attractions. The same Positive Technologies researchers later located an undocumented configuration bit labeled for the High Assurance Platform program. 1 of 2
29
119
13
488
37,941
CeDeROM retweeted
Mobile-Whip: A Compact Battery Powered Mini-Whip Style Active HF Antenna for Handhelds and SDRs rtl-sdr.com/mobile-whip-a-co…
3
58
4
522
19,304
I built a terminal tool using MedDecider. Paste a clinical note, get a probability for every answer. And when it's not sure, it says so and flags it for a human. Open weights, runs fully on my Mac. Take it if you want.
2
8
64
5,718
BBC: Hablaremos con nuestro experto en seguridad de BBC respecto a la vulnerabilidad de PHP. El experto en seguridad: No sabía que PHP existía hasta ayer en la mañana.
351
1,098
493
8,609
593,474
CeDeROM retweeted
Finally full DOOM on a Vape😅 Source: github.com/atc1441/Vape_DOOM… Since the previous custom firmware was only Screen Sharing it this was finally needed! Only possible by Arturs impressive work on making DOOM go bzzz on 32kb RAM
102
1,089
150
9,663
507,468
So saddened to hear of the loss of Tom Skerritt. Alien, Picket Fences etc. Never forgotten
159
318
29
2,741
25,730
CeDeROM retweeted
Tom Skerritt, who starred in the TV series “Picket Fences” and appeared in movies ranging from “MASH” to “Alien,” “Top Gun,” “A River Runs Through It” and “Ted,” has died of natural causes at 93. variety.com/2026/film/news/t…
708
3,923
1,303
19,696
879,137
The Lviv Regional Council has designated 2027 in the Lviv region as the Year of Roman Shukhevych, an architect of the genocide in Volhynia, the Ukrainian Insurgent Army (UPA), and Oleh Olzhych, a leader of the OUN-M. Among those being commemorated, Roman Shukhevych stands out as a particularly dark figure in history. As commander of the Ukrainian Insurgent Army (UPA), co-founder of collaborationist units operating alongside Germany, and one of those responsible for crimes committed against Poles, Jews, Belarusians, Ukrainians, Russians and members of other nationalities in Belarus, Volhynia and Eastern Lesser Poland, he bears responsibility for some of the gravest atrocities of that period. The decision taken on 20 October 2026 by the Lviv Regional Council is part of a long-standing process of establishing an official cult of Shukhevych and other proponents of radical Ukrainian nationalism. Honouring this criminal must be regarded as a blow to the memory of the victims of the genocide carried out on his orders. It is also surprising that Oleh Olzhych has simultaneously been named a patron of 2027. He headed an organisation whose leadership condemned the crimes committed by Bandera's followers, often paying for their opposition with their lives. 💬"Cut them down to the last man. Burn villages inhabited exclusively by Poles; in mixed villages, eliminate only the Polish population." These were the words written by Roman Shukhevych in an order addressed to his subordinate commanders. Shukhevych was not only one of those responsible for the genocide perpetrated by Ukrainian nationalists, but also an architect of the false narrative, perpetuated to this day, that denies the crimes committed between 1943 and 1945. Roman Shukhevych belonged to the younger, most radical generation of Ukrainian nationalists who, from the late 1920s onwards, sought to implement the criminal vision of an ethnically homogeneous Ukraine. In 1929, he became one of the leaders of the combat section of the Organisation of Ukrainian Nationalists (OUN). He helped devise a strategy of terror intended to destabilise Eastern Lesser Poland and Volhynia. The targets of Ukrainian nationalist extremists included both Ukrainians and Poles, civil servants, teachers and community activists, who sought reconciliation between the two nations. Shukhevych coordinated preparations for the assassination of Tadeusz Hołówko, a Polish politician who, just months before his death, had emphasised that Ukrainians had the "right to regard themselves as co-owners of the country, entitled to full equality of rights with the Polish population and to respect for their national and cultural interests." Roman Shukhevych initiated cooperation between Ukrainian nationalists and Germany, which continued until the end of WW2. During the 1930s, German intelligence began financing the OUN's terrorist activities, viewing them as an opportunity to destabilise Poland. Following Germany's invasion of Poland, Shukhevych became involved, in 1940–1941, in preparing a detailed plan for the establishment of an ethnically homogeneous Ukrainian state. In the document The Struggle and Activities of the OUN During the War, prepared on the eve of the German-Soviet war, Shukhevych and his co-authors, Stepan Lenkavskyi and Yaroslav Stetsko, concluded that the transitional period following the passage of the front would create an opportunity, "amid chaos and confusion," for the "elimination of undesirable Polish, Russian and Jewish activists." This scenario began to be implemented as early as late June 1941. Members of the Organisation of Ukrainian Nationalists contributed to the German war effort. In June 1941, Shukhevych became deputy to the German commander of the Nachtigall Battalion. The unit became notorious for crimes against the Jewish population in the summer of 1941. Despite these "services", the Germans did not regard the formation as the nucleus of a future Ukrainian army. Instead, they decided to exploit the fanaticism of Ukrainian nationalists. Nachtigall was reorganised into the 201st Schutzmannschaft Battalion, a police security unit. Shukhevych and his comrades-in-arms were deployed to Belarus, where entire villages were murdered under the pretext of combating Soviet partisans. One eyewitness account of the pacification of a village describes the brutality of these actions: 💬"His name was Hauptmann Shukhevych. Anna Radwan, whose son they had beaten and wanted to shoot, fell at his feet, kissing his boots and begging for mercy. The Ukrainian Hauptmann kicked her in the face, leaving her covered in blood. [...] The Ukrainians were worse beasts than the Germans and the NKVD men." The villagers whom Shukhevych had condemned to death were saved by the arrival of a German patrol. For Shukhevych and his subordinates, the crimes committed in Belarus served as a form of preparation for implementing their plan to create a Ukraine "as pure as a glass of water." In 1943, Shukhevych and other collaborators continued their activities within the ranks of the Ukrainian Insurgent Army. He approved the actions and methods employed by the Bandera faction of the OUN and the UPA against the local Polish population in Volhynia. It should be recalled that approximately 60,000 Poles are estimated to have been murdered in Volhynia, often with extreme brutality. Moreover, from the turn of 1943 and 1944, the "Volhynian scenario", with certain modifications, was extended to Eastern Lesser Poland. Shukhevych justified his order to "expand operations" into Eastern Lesser Poland by citing an alleged expansion of Home Army (Armia Krajowa) bases. He also expanded the structures of local commands. In doing so, he created an illusion of the UPA's organisational strength while simultaneously shifting responsibility for the murders of Poles onto local commanders. These commanders were ostensibly instructed merely to "respond" to the activities of the Home Army and even to those of a purported "Polish police force under SS command", which did not in fact exist. At the same time, Shukhevych ordered talks to be conducted with the Home Army, ostensibly with the aim of reaching a "ceasefire". Shukhevych was aware that, with Germany facing defeat, the genocide perpetrated by the UPA would discredit the ideology of Ukrainian nationalism. As early as the spring of 1944, the leadership of the Bandera faction of the OUN attempted to fabricate evidence concerning the causes and perpetrators of the ethnic cleansing. Shukhevych deliberately and systematically constructed a false narrative denying the scale of the genocide committed by his own subordinates and the objectives pursued by Ukrainian nationalists. His death at the hands of NKVD officers on 5 March 1950, in Bilohorshcha near Lviv, "saved" his reputation among Ukrainian émigrés. By that time, Shukhevych was becoming a symbol of Ukrainian nationalism, almost equal in stature to Stepan Bandera.
31
154
10
426
9,098
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours. Each key should be a 116-digit number, but one was just 4. Anyone can guess them and forge HTTPS certs for any website.
618
3,679
1,698
30,103
5,653,793
POV: Painting a 1.6m high SLOW road marking to spec👌
2
39
70
9,921
The first RFC was written in 1969 by Steve Crocker, a 25 y/o grad student. He worked all night on it, writing in the bathroom so as to not wake up his roommates RFC1 described the "handshake" between two ARPANET hosts Today there are over 9800 RFCs
9
37
2
302
26,007
CeDeROM retweeted
I get into the Lotus and head out for a drive. Because I can. And I don't have a real one. Car & Driver (1992, MS-DOS)
9
21
1
305
7,834
Former Director of National Intelligence (DNI) Tulsi Gabbard at the 2024 Tactical Games in Arizona. Tulsi’s public life has run on two tracks at once: elected office and the uniform. At 21 she became the youngest woman ever elected to the Hawaii House, then stepped down in 2004 to deploy with the Hawaii Army National Guard’s medical company to Iraq, becoming the first state official to leave office to serve in a war zone. She later commissioned as an officer, led a military police platoon in Kuwait in 2008–2009, and kept serving in the Army Reserve, rising to lieutenant colonel. The white streak in her hair started during and after that first tour. She has said she began going gray in that one spot then and kept it as a reminder of the human cost of war. Back home she served on the Honolulu City Council, then four terms in Congress for Hawaii’s 2nd District from 2013 to 2021, including time as vice chair of the Democratic National Committee and on the Armed Services and Foreign Affairs committees. She was the first Hindu member of Congress and the first Samoan-American voting member. In 2020 she ran for the Democratic presidential nomination, later left the party, and in 2024 joined the Republicans and backed Donald Trump. The Senate confirmed her as Director of National Intelligence in 2025, and she held the post until June 2026, overseeing the intelligence community as the highest-ranking Pacific Islander American official in US history.
25
86
3
1,192
43,451
CeDeROM retweeted
One of the best uses of light and shadow ever.
153
2,859
128
27,452
371,960
ThisAintCanon on IG
37
279
20
1,750
140,147
CeDeROM retweeted
Want to make a coworker question their sanity before a long weekend? Drop this single line into a shared header file:
11
12
2
278
9,177
I've decided to put a screenshot showing the hex editor view of a Turla Kazuar sample behind acrylic glass on my desk to always remind me, why I am doing all this ... because I 💛 to be a pain in the neck of the bad guys xitter.cf/cyb3rops/status/115659…
It seems that I have some fans over in Russia 🐻 #TurlaLicksAss thx to the FireEye analyst who brought this to my attention virustotal.com/gui/file/4417…
183
244
28
2,185
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
36
320
113
1,428
475,897
I've heard so many versions of this song and they're all great. But in my opinion, this is the best version ever.
180
1,272
81
7,449
264,275
"KOMBINOWAĆ": The Polish art of outsmarting reality. There is a Polish verb that has no satisfactory equivalent in English or French. It is kombinować, and understanding it is essential to understanding the Polish national character. Kombinować means finding a solution to a problem through ingenuity, improvisation, personal connections, dubious arrangements, and occasionally methods that would make a German lawyer suffer a nervous breakdown. It is neither necessarily legal nor necessarily illegal. Neither entirely honest nor entirely dishonest. It occupies that fascinating territory between human intelligence and criminal entrepreneurship. And Poles have elevated it to something approaching an art form. Imagine that three Europeans discover their washing machines have broken down. The Englishman telephones a repair company. The technician arrives on Tuesday, identifies the defective component, orders a replacement, and schedules another appointment. The Frenchman telephones customer service, argues for forty minutes about consumer rights, threatens legal action, and eventually writes an indignant letter to the manufacturer. He might even establish an association of dissatisfied washing-machine owners. The Pole looks at his washing machine and announces: Spokojnie. Coś wykombinujemy. (Don't worry. We'll "figure something out", but it's a bit more than that...) What follows is difficult to describe within the conventional boundaries of economic science. He telephones his cousin, who knows a mechanic, whose brother-in-law once worked at a factory producing agricultural equipment. The mechanic has no washing-machine components, but he possesses a motor from an old Soviet tractor. The motor is too large. No problem. A neighbour knows somebody who can modify it. Unfortunately, that somebody owes money to another neighbour, who happens to need help transporting a refrigerator. Three telephone calls, two bottles of vodka, one borrowed trailer, and an entirely unrelated dispute about a missing bicycle later, the washing machine works. It now sounds like a MiG-21 preparing for takeoff, but it works. And the Pole is delighted. He has not merely repaired an appliance. He has defeated reality. This is kombinowanie. The Polish “Coś wykombinujemy” contains something more adventurous than "we'll figure something out". The process itself is an expedition into the unknown. French offers several partial equivalents. Se débrouiller conveys resourcefulness. Bricoler describes improvisation. Magouiller suggests suspicious arrangements. Combiner can refer to devising schemes. But Polish conveniently compresses all these possibilities into one verb. A man who kombinuje might be an ingenious inventor, an exceptionally resourceful neighbour, a slightly dishonest businessman, or a future defendant in a corruption trial. Sometimes all four. And this peculiar mentality has historical foundations. For much of the twentieth century, particularly under communism, Poles inhabited an economy in which official procedures frequently proved incapable of satisfying elementary material needs. You wanted a refrigerator? The shop had none. You wanted building materials? The warehouse was empty. You wanted to repair your car? The necessary components were unavailable. But somewhere, somebody knew somebody. The communist state had developed an elaborate system for planning production, allocating resources, and distributing goods. The Polish population responded by developing an equally elaborate system for circumventing it. An entire parallel economy emerged, built upon favours, exchanges, informal obligations, ingenious substitutions, and personal relationships. The bureaucrat possessed the regulations. The kombinator possessed his cousin's telephone number. And quite frequently, the cousin proved more useful than the entire Ministry of Industry. Naturally, there was a price to pay. A society organised around kombinowanie may produce extraordinarily resourceful individuals while tolerating spectacularly dysfunctional institutions. Why demand that the system function properly when you can always find a way around it? Why repair the road when you know a shortcut through somebody's field? Why simplify the administration when everyone knows that the appropriate stamp can be obtained through a friend? The kombinator triumphs over dysfunction, but his triumph can also help perpetuate it. Yet it would be a mistake to regard kombinowanie merely as the cultural residue of communism. The word and the attitudes it describes have a broader history. They express a particular admiration for intelligence that refuses to remain confined within established procedures. In this sense, kombinowanie has an almost artistic dimension. The engineer asks what an object was designed to do. The kombinator asks what else it could possibly do. The administrator sees a regulation. The kombinator sees an interesting literary text open to interpretation. The economist sees an inefficient allocation of resources. The kombinator sees an opportunity to exchange a broken motorcycle for six chickens, a barrel of diesel, and an introduction to a man who works at the town hall. There is something profoundly creative in this attitude, even when the results are absurd. Of course, the English also improvise, the French also circumvent rules, and the Germans are perfectly capable of inventive dishonesty. These are not exclusive national behaviours. What is distinctive is the extraordinary semantic and cultural career of the Polish word: its ability to turn practical improvisation, cunning, opportunism, and social resourcefulness into variations of the same recognisable activity. And perhaps the greatest difference lies in the attitude towards the unexpected. For the English pragmatist, a good solution is one that works reliably. For the French intellectual, a good solution should ideally also be theoretically defensible. For the Polish kombinator, a good solution is one that nobody would have imagined in the first place. Preferably one that also leaves him with a spare tractor motor, three bottles of vodka, and a neighbour who owes him a favour.
68
168
19
848
20,617